Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2002

78 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-1183
    36Monitor

    Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to e

    HighCVSS 7.5Proof of conceptEPSS 19%

    microsoft · windows 98Dec 11, 2002

  • CVE-2002-1185
    26Monitor

    Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers t

    MediumCVSS 5.0No exploitEPSS 21%

    microsoft · ieDec 11, 2002

  • CVE-2002-1186
    26Monitor

    Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remo

    MediumCVSS 5.0No exploitEPSS 19%

    microsoft · ieDec 11, 2002

  • CVE-2002-1187
    32Monitor

    Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the loca

    MediumCVSS 6.8Proof of conceptEPSS 15%

    microsoft · internet explorerDec 11, 2002

  • CVE-2002-1188
    29Monitor

    Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user infor

    MediumCVSS 6.4No exploitEPSS 12%

    microsoft · internet explorerDec 11, 2002

  • CVE-2002-1254
    46Plan

    Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system o

    HighCVSS 7.5Proof of conceptEPSS 53%

    microsoft · ieDec 11, 2002

  • CVE-2002-1317
    37Monitor

    Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of

    HighCVSS 7.5Proof of conceptEPSS 24%

    xfree86 project · x11r6Dec 11, 2002

  • CVE-2002-1318
    56Plan

    Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an

    CriticalCVSS 10.0WeaponizedEPSS 51%

    samba · sambaDec 11, 2002

  • CVE-2002-1255
    24Monitor

    Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid h

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · outlookDec 18, 2002

  • CVE-2002-1262
    34Monitor

    Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · internet explorerDec 18, 2002

  • CVE-2002-1338
    27Monitor

    The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist,

    MediumCVSS 5.0No exploitEPSS 23%

    microsoft · office web componentsDec 18, 2002

  • CVE-2002-1339
    24Monitor

    The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to

    MediumCVSS 5.0No exploitEPSS 11%

    microsoft · office web componentsDec 18, 2002

  • CVE-2002-1340
    24Monitor

    The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the

    MediumCVSS 5.0No exploitEPSS 11%

    microsoft · office web componentsDec 18, 2002

  • CVE-2002-1643
    52Plan

    Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a

    HighCVSS 7.5WeaponizedEPSS 74%

    realnetworks · helix universal serverDec 19, 2002

  • CVE-2002-1257
    45Plan

    Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java appl

    CriticalCVSS 10.0No exploitEPSS 15%

    microsoft · windows 2000Dec 23, 2002

  • CVE-2002-1258
    25Monitor

    Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other application

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · windows 2000Dec 23, 2002

  • CVE-2002-1260
    35Monitor

    The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · windows 2000Dec 23, 2002

  • CVE-2002-1325
    24Monitor

    Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet tha

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · windows 2000Dec 23, 2002

  • CVE-2002-1357
    43Plan

    Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a

    CriticalCVSS 10.0No exploitEPSS 9%

    cisco · iosDec 23, 2002

  • CVE-2002-1359
    64This week

    Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o

    CriticalCVSS 10.0WeaponizedEPSS 80%

    cisco · iosDec 23, 2002

  • CVE-2002-1361
    44Plan

    overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary c

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    sun · cobalt raq 4Dec 23, 2002

  • CVE-2002-1374
    36Monitor

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force

    HighCVSS 7.5Proof of conceptEPSS 20%

    oracle · mysqlDec 23, 2002

  • CVE-2002-1375
    37Monitor

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long resp

    HighCVSS 7.5Proof of conceptEPSS 23%

    oracle · mysqlDec 23, 2002

  • CVE-2002-1327
    37Monitor

    Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA

    HighCVSS 7.5No exploitEPSS 23%

    microsoft · windows xpDec 26, 2002

  • CVE-2002-1368
    35Monitor

    Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute a

    HighCVSS 7.5Proof of conceptEPSS 15%

    easy software products · cupsDec 26, 2002

  • CVE-2002-1623
    35Monitor

    The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initia

    MediumCVSS 5.0No exploitEPSS 48%

    checkpoint · vpn-1 firewall-1Dec 31, 2002

  • CVE-2002-1634
    25Monitor

    Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield

    MediumCVSS 5.0Proof of conceptEPSS 16%

    novell · netwareDec 31, 2002

  • CVE-2002-1660
    33Monitor

    calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command paramet

    HighCVSS 7.5Proof of conceptEPSS 11%

    jelsoft · vbulletinDec 31, 2002

  • CVE-2002-1671
    24Monitor

    Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of th

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · internet explorerDec 31, 2002

  • CVE-2002-1688
    25Monitor

    The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other user

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · internet explorerDec 31, 2002

  • CVE-2002-1694
    24Monitor

    Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow rem

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · internet information serverDec 31, 2002

  • CVE-2002-1695
    24Monitor

    Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to m

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · internet information serverDec 31, 2002

  • CVE-2002-1698
    25Monitor

    Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long F

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · msn messengerDec 31, 2002

  • CVE-2002-1700
    24Monitor

    Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbi

    MediumCVSS 4.3Proof of conceptEPSS 24%

    macromedia · coldfusionDec 31, 2002

  • CVE-2002-1705
    25Monitor

    Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) w

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · internet explorerDec 31, 2002

  • CVE-2002-1712
    28Monitor

    Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets

    MediumCVSS 5.0Proof of conceptEPSS 25%

    microsoft · windows 2000Dec 31, 2002

  • CVE-2002-1714
    26Monitor

    Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" w

    MediumCVSS 5.0Proof of conceptEPSS 19%

    microsoft · ieDec 31, 2002

  • CVE-2002-1716
    24Monitor

    The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using th

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · officeDec 31, 2002

  • CVE-2002-1717
    25Monitor

    Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.c

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · internet information servicesDec 31, 2002

  • CVE-2002-1718
    24Monitor

    Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file,

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · internet information servicesDec 31, 2002

  • CVE-2002-1744
    40Plan

    Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existen

    MediumCVSS 5.0Proof of conceptEPSS 65%

    microsoft · internet information servicesDec 31, 2002

  • CVE-2002-1745
    36Monitor

    Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with exten

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · internet information servicesDec 31, 2002

  • CVE-2002-1753
    40Plan

    csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup paramete

    HighCVSS 7.5No exploitEPSS 32%

    cgiscript · csnews professionalDec 31, 2002

  • CVE-2002-1762
    25Monitor

    Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans i

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · baseline security analyzerDec 31, 2002

  • CVE-2002-1769
    34Monitor

    Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remo

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · site serverDec 31, 2002

  • CVE-2002-1783
    25Monitor

    CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for

    MediumCVSS 5.0No exploitEPSS 16%

    php · phpDec 31, 2002

  • CVE-2002-1790
    30Monitor

    The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send

    MediumCVSS 5.0Proof of conceptEPSS 33%

    microsoft · exchange serverDec 31, 2002

  • CVE-2002-1795
    22Monitor

    Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote

    MediumCVSS 4.3No exploitEPSS 16%

    microsoft · tsac activex controlDec 31, 2002

  • CVE-2002-1809
    35Monitor

    The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote a

    HighCVSS 7.5Proof of conceptEPSS 16%

    oracle · mysqlDec 31, 2002

  • CVE-2002-1823
    33Monitor

    Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP re

    HighCVSS 7.5Proof of conceptEPSS 10%

    lonerunner · zeroo http serverDec 31, 2002

  • CVE-2002-1831
    27Monitor

    Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that cont

    MediumCVSS 5.0Proof of conceptEPSS 22%

    microsoft · msn messengerDec 31, 2002

  • CVE-2002-1847
    40Plan

    Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands

    HighCVSS 7.5Proof of conceptEPSS 33%

    microsoft · windows media playerDec 31, 2002

  • CVE-2002-1850
    35Monitor

    mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumpti

    HighCVSS 7.5Proof of conceptEPSS 17%

    apache · http serverDec 31, 2002

  • CVE-2002-1864
    40Plan

    Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".."

    MediumCVSS 5.0WeaponizedEPSS 17%

    sws · sws simple web serverDec 31, 2002

  • CVE-2002-1873
    24Monitor

    Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · exchange serverDec 31, 2002

  • CVE-2002-1908
    24Monitor

    Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · internet information servicesDec 31, 2002

  • CVE-2002-1918
    45Plan

    Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with

    CriticalCVSS 10.0No exploitEPSS 16%

    microsoft · data access componentsDec 31, 2002

  • CVE-2002-1932
    34Monitor

    Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)"

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · windows 2000Dec 31, 2002

  • CVE-2002-1954
    21Monitor

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 11%

    php · phpDec 31, 2002

  • CVE-2002-1973
    42Plan

    Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static lib

    HighCVSS 7.5Proof of conceptEPSS 40%

    microsoft · foundation class libraryDec 31, 2002

  • CVE-2002-1993
    44Plan

    webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    affordable web space design · affordable web space design webbbsDec 31, 2002

  • CVE-2002-2006
    29Monitor

    The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and

    MediumCVSS 5.0Proof of conceptEPSS 30%

    apache · tomcatDec 31, 2002

  • CVE-2002-2007
    32Monitor

    The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory

    MediumCVSS 5.0Proof of conceptEPSS 41%

    apache · tomcatDec 31, 2002

  • CVE-2002-2029
    37Monitor

    PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and pos

    HighCVSS 7.5Proof of conceptEPSS 23%

    apache · http serverDec 31, 2002

  • CVE-2002-2031
    26Monitor

    Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files

    MediumCVSS 5.0Proof of conceptEPSS 20%

    microsoft · internet explorerDec 31, 2002

  • CVE-2002-2062
    21Monitor

    Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view

    MediumCVSS 4.3Proof of conceptEPSS 13%

    microsoft · internet explorerDec 31, 2002

  • CVE-2002-2073
    21Monitor

    Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to

    MediumCVSS 4.3Proof of conceptEPSS 12%

    microsoft · site serverDec 31, 2002

  • CVE-2002-2077
    25Monitor

    The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · windows 2000Dec 31, 2002

  • CVE-2002-2081
    25Monitor

    cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file w

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · site serverDec 31, 2002

  • CVE-2002-2100
    23Monitor

    Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that

    MediumCVSS 5.0No exploitEPSS 11%

    microsoft · outlookDec 31, 2002

  • CVE-2002-2101
    33Monitor

    Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "ja

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · outlookDec 31, 2002

  • CVE-2002-2117
    24Monitor

    Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP).

    MediumCVSS 5.0No exploitEPSS 11%

    microsoft · windows xpDec 31, 2002

  • CVE-2002-2164
    27Monitor

    Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HR

    MediumCVSS 5.0Proof of conceptEPSS 21%

    microsoft · outlook expressDec 31, 2002

  • CVE-2002-2226
    49Plan

    Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.

    HighCVSS 7.5WeaponizedEPSS 63%

    tftpd32 · tftpd32Dec 31, 2002

  • CVE-2002-2268
    53Plan

    Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.

    CriticalCVSS 9.4WeaponizedEPSS 51%

    netdave · webster http serverDec 31, 2002

  • CVE-2002-2281
    43Plan

    Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java comma

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    symantec · javaDec 31, 2002

  • CVE-2002-2328
    33Monitor

    Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service

    HighCVSS 7.1No exploitEPSS 16%

    microsoft · windows 2000Dec 31, 2002

  • CVE-2002-2380
    28Monitor

    NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undoc

    MediumCVSS 6.4No exploitEPSS 10%

    microsoft · network firmwareDec 31, 2002